Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/3133312e3130302e3135322e302f32342d3234203d3e203631363339.roa
File: 3133312e3130302e3135322e302f32342d3234203d3e203631363339.roa (raw, json)
Hash identifier: nkZpI7utuGuzfDtaAeeG/TbH+sK6o0KZkg+y5aCaeuo=
Subject key identifier: C3:EC:D1:92:94:29:D4:1C:AE:6F:6F:92:56:33:66:02:3A:A7:E7:83
Certificate issuer: /CN=0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B
Certificate serial: 60ECC21284148F3DA4C02F04F1781A5CB3709576
Authority key identifier: 0D:8D:D1:F1:99:2D:55:A1:0F:EA:85:FA:E3:F9:5E:CE:F8:7D:E4:2B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/3133312e3130302e3135322e302f32342d3234203d3e203631363339.roa
Signing time: Wed 05 Mar 2025 19:00:21 +0000
ROA not before: Wed 05 Mar 2025 18:55:21 +0000
ROA not after: Wed 04 Mar 2026 19:00:21 +0000
asID: 61639
IP address blocks: 131.100.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:ec:c2:12:84:14:8f:3d:a4:c0:2f:04:f1:78:1a:5c:b3:70:95:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B
Validity
Not Before: Mar 5 18:55:21 2025 GMT
Not After : Mar 4 19:00:21 2026 GMT
Subject: CN=C3ECD1929429D41CAE6F6F92563366023AA7E783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:68:4c:c4:5f:59:78:82:06:76:ff:4f:65:7b:
76:fc:da:d0:21:67:b6:17:2e:fc:82:4e:c2:b8:e7:
75:bb:39:be:bd:e0:0f:23:31:e4:b2:e4:9a:db:10:
24:08:c0:8e:f8:1e:b2:b9:ea:28:b8:ab:86:25:0c:
42:3f:fd:70:64:62:18:27:67:90:96:d7:54:f5:7d:
0e:c5:81:6d:52:1e:e6:e5:54:fb:5b:25:b3:86:13:
e9:ba:06:3c:16:b9:a8:8e:fa:f1:da:3a:89:4b:c9:
99:0e:f7:3b:dd:0c:fe:5f:89:32:c4:9f:79:90:c0:
79:d1:f7:8e:bc:d4:1e:d9:a2:f9:fe:f3:18:26:c0:
87:f2:e7:85:a6:b9:da:35:76:73:98:01:1d:c1:0e:
d5:25:65:eb:3b:0c:d2:f8:bd:d0:77:53:3c:ce:29:
e8:3d:a4:e3:1c:03:ac:b6:60:e5:3e:fe:bc:8d:5e:
c4:c4:e1:c7:1c:a7:58:9d:ad:16:0e:c4:e2:1b:83:
e0:b8:26:60:0b:55:be:b6:e6:2b:62:77:71:5b:ce:
1e:4c:4c:1e:d9:fe:88:3a:a0:56:58:4f:fa:b4:32:
f8:36:07:96:e7:06:23:06:77:d4:13:2b:9b:af:af:
a8:f8:7c:92:cd:38:b4:58:a9:e3:85:bf:ee:32:6b:
f2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:EC:D1:92:94:29:D4:1C:AE:6F:6F:92:56:33:66:02:3A:A7:E7:83
X509v3 Authority Key Identifier:
keyid:0D:8D:D1:F1:99:2D:55:A1:0F:EA:85:FA:E3:F9:5E:CE:F8:7D:E4:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/3133312e3130302e3135322e302f32342d3234203d3e203631363339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.100.152.0/24
Signature Algorithm: sha256WithRSAEncryption
71:57:29:4e:26:79:38:84:a4:f9:1f:33:95:29:0a:ba:6d:85:
9f:d3:fc:03:3f:8c:96:53:67:0d:73:56:36:87:21:bd:22:8f:
6d:75:a4:61:eb:94:72:8e:c5:2d:3c:76:fc:2c:9d:40:c0:d4:
1b:6b:32:8c:ea:28:74:94:29:b5:cc:bf:9d:86:3d:eb:90:f3:
9b:8b:6f:34:7e:b6:bd:91:52:a2:db:91:cd:d4:77:ab:97:57:
37:de:63:9b:52:eb:b7:13:4b:72:a6:1c:0c:65:26:88:6c:74:
4b:5f:92:78:d7:94:31:83:cf:80:97:72:af:8d:68:4f:a4:dd:
7f:e4:e9:cf:c4:6b:5c:a1:a4:66:10:1e:8f:4a:cd:d3:9c:c9:
79:3c:7e:79:3d:8b:c1:be:2b:7b:21:0e:02:f5:01:80:f5:ec:
51:12:88:c6:49:bc:50:f7:31:ae:0e:4b:98:46:eb:f6:71:e1:
f8:00:85:ae:73:20:79:1f:66:e7:79:8f:b0:38:28:5f:e7:49:
91:67:58:45:97:c5:43:0a:b2:b9:23:95:cf:0a:cb:47:3a:23:
d4:cd:a5:38:ff:2c:0c:b1:72:7f:e0:b2:55:a9:30:17:de:7b:
f3:6e:96:4d:a5:71:27:8c:da:db:32:de:4d:86:aa:75:28:33:
7a:45:b4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:21 2025 by rpki-client